CiscoSecurity/fp-05-firepower-cef-connector-arcsight

v3.8.4

ptamba opened this issue · 5 comments

ptamba commented

Hi,

Running version 3.8.4, the connector will run for a while then throw below error repeatedly, which will then cause the event volume to drop significantly.

2021-09-05 16:16:40,240 estreamer.pipeline WARNING ParsingException: _attributes() | offset (1328625036) > length (172) | recordType=94

ahmedboujelben commented

Hi,

Running version 3.8.4, the connector will run for a while then throw below error repeatedly, which will then cause the event volume to drop significantly.

2021-09-05 16:16:40,240 estreamer.pipeline WARNING ParsingException: _attributes() | offset (1328625036) > length (172) | recordType=94

ahmedboujelben commented

Hi team,

We are facing the same issue.
How did you resolve the issue ?

Thanks,
Ahmed

premjithraman commented
ahmedboujelben commented

Hi,

From the estreamer Event configuration in cisco FMC, We have to uncheck which events ?
We have to disable User activity or connection events?

premjithraman commented